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Amended claims 

1. (Currently Amended) An autfaontioation s ystem used by a first 
application for managing user access to at least one of a plurality of network 
compatible applications, comprising: 

an authentication processor for, 

receiving user identification information including a user 

identifier and 

initiating authentication of said user identification information 
using an authentication service; and 

a at least one conmiunication processor for^ 

communicating an authentication service identifier and a 
corresponding user identifier to a managing applicationf said authentication service 
identifier identifying an authentication service used to authenticate identification 
information of said corresponding user and 

automatically communicating application, specific context 
information in a data field of a URL to a second application of said plurality of 
network compatible apoli cations in response to a user conmiand to initiate execution 
of said second application and in response to authentication of said user identification 
information . 

2. (Cuixently Amended) A system according to claim 1, wherein 

said application specific context information comprises at least 
one of. (a) a uscrjdentificr and Oj) a patient identifier and 

said communication processo r qIgo oommunioatos a soGsion idontifior 
identifying a UGor initiatod - se s sion of operation of said first application - to — sttld 
managing application encrvpts said address portion of said URL and incorporates^ 
said encrypted address portion of said URL, together with said address portion of said 
URL in non-encrypted_form, into a single processed URL data_sfa1ng , 

3. (Currently Amended) A system according to claim 1, wherein 

said communication processor also communicates a session Jdentifiet 
identifying a user initiated session of operation of said first application to said 
managing application and 

said user identification information includes a password associated 
with said user identifier. 
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4. (Original) A system according to claim 1, wherein 

said communication processor communicates said authentication 
service identifier and said corresponding user identifier to a managing application for 
compilation of a database. 

5. (Original) A system according to claim 4, wherein 

said database is accessible by other applications of said plurality of 
network compadble applications for mapping a non-authenticated user identifier of a 
participant application to an authendcated and difierent user idendfier of another 
application* 

6. (Currently Anaended) An authontioation system used for processing 
user access to network compatible applications* comprising: 

an authentication processor for, 

receiving authentication service identifier and corresponding 

user identifier data pairs from at least one of a plurality of applications, 
compiling a database using said data pairs, 
mapping a non-authenticated user identlQer of a second 

application to an authenticated different user identifier of a first application using said 

database; and 

€t at least one concununication processor for^i 

communicating said authendcated different user Identifier to 
said second application and 

automatically communicating application specific context 
information in a data field, of a XJRL to said second aoolication in response to a user 
command to initiate execution of said second application . 

7. (Original) A system according to claim 6, wherein 

said authentication service identifier identifies an authentication 
service used to authenticate identification information comprising a user identifier of 
said corresponding user to provide an authenticated user identifier. 

8. (Currently Amended) A system according to claim 6, wherein 

said authentication processor performs said mapping using said 
database by matching an authentication service identifier of said second application 
with an authentication service identifier of said first application and providing said 
eoH-c^nding authenticated different user identifier of said first application as said a 
mapped user identifier, 
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9. (Currently Amended) A system according to claim 6, including 

an input processor for receiving a session identifier identifying a user 
initiated session of operation wherein 

said at least one communication processor encrypts said address 
portion of 5;aid URL and incorporates, said encrypted address portion of said URL. 
togcthei: with said address portion of said URL \^ noq-encrypte<^ form, iq^o a sing^^ 
processed URL data string and provides a key supporting decryption of said encrypted 
address portion, to a destination system . 

10. (Original) A system according to claim 6, wherein 

said first application is a parent application and said second application 
is a child application and 

said authenticated different user identifier of said first application is 
used by said second application eliminating the need for said second application to 
authenticate a user identifier. 

11. (Original) A system according to claim 6, wherein 

said communication processor communicates a parameter to said 
second application, said parameter identifying success or failure of said mapping, 

12. (Original) A system according to claim 6, wherein 

said authentication processor receives an authentication service 
identifier and corresponding user identifier data pair from said first application and 

said first application is a parent application and said second application 
is a child applicatiorL 

13. (Original) A system according to claim 6, wherein 

said authentication service identifier employs a predetermined data 
format for use by said plurality of applications in constraining size of said database. 
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14. (Cuiiently Amended) An authontioation system used for processing 
user access to Internet compatible applications, comprising: 

an authentication processor for« 

receiving an authentication service identifier and corresponding 
user identifier from a parent application, and 

mapping a non-authenticated user identifier of a child 
application to an authenticated different user identifier of said parent application; and 
^ at least one communication processor fori 

communicating said authenticated different user identifier to 
said child application and 

automaticatly communicating applicadon specific context 
^nfqirmatiofi in a c^ata Qcid of ^ URI, ^o said child appUcation_m_ipsponsA,tp,a_^^^^^^ 
command to_initiate execution of said child application and in response to 
communicating said authenticated different user identifier . 

15. (Original) A system according to claim 14» wherein 

said parent application establishes a session of user operation and 
said child application uses said authcnticadon system to participate in 
said session of user operation. 

16. (Original) A system according to claim 14^ wherein 

said authentication processor compiles a database using data pairs 
comprising an authenticadon service identifier and corresponding user identifier and a 
data pair is received from individual applications of a plurality of concurrently 
operating Internet compatible applications and 

said authentication processor uses said database in mapping said non- 
authenticated user identifier of said child applicadon to said authenticated different 
user identifier of said parent application. 

17. (Currently Axnended) A system according to claim 16, wherein 
said authentication processor performs said mapping using said 

database by matching an authentication service identifier of said child application 
with an authentication service identifier of said parent application and providing said 
corresponding authenticated different user identifier of said parent application as said 
a mapped user identifier. 
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18. (Original) A system according to claim 14, wherein 

said authentication sendee identifier identifies an authentication 

service used to authenticate identification information comprising a user identifier of 

said corresponding user to provide an authenticated user identifier. 



19. (Original) A system according to claim 14, wherein 

said authenticated different user identifier of said parent application is 
used by said child application eliminating the need for said child application to 
authenticate a user identifier. 

20. (Original) A system accoixling to claim 14» wherein 

access to said chUd application by a user is enabled by said child 
application in response to receiving said authenticated different user identifier without 
a subsequent re-entry of user identification information via a logon menu. 

21. (Currentiy Amended) An — auth e ntication — ^method used for 
processing user access to Ihtemet compatible applications, comprising the stepa 
activities of: 

receiving an authentication service identifier and corresponding user 
identifier from a parent application, and 

mapping a non-authenticated user identifier of a child application to an 
authenticated different user identifier of said parent application; 

communicating said authenticated different user identifier to said child 
applicatio n: and 

automatically communicating application specific conte2L£ 

information in a data field of a URL to said child application in response to a user 
command to initiate execution of said child application and in response to 
communicating said authenticated different user identifier , 

22. (Currentiy Amended) A method according to claim 21, including 
the step activities of 

receiving data pairs, comprising an authentication service identifier 
and corresponding user identifier, fi'om Individual applications of a plurality of 
concurrentiy operating Internet compatible applications, 

compiling a database using said data pairs, and 

using said database in mapping said non^authenticated user identifier 
of said child application to said authenticated different user identifier of said parent 
application. 
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23. (Currently Amended) An ttuthontioation m ethod used by a ^t 
application for managing user access Co at least one of a plurality of network 
compatible applications, comprising the fi t « p & activities of: 

receiving user identification information including a user identifier; 

initiating autbenticadon of said user identification informadon using 
an authentication service; 

communicating an authentication service identifier and a 
corresponding user identijEier to a managing application, said authentication service 
identifier identifying an authentication service used to authenticate identification 
information of said corresponding use n_and 

automaricallv communicatinp application specific context information 
in a data field of a URL to a second application of said plurality of networic 
compatible applications in response to a user command to initiate execution of said 
second application and in responi;e to authentication of said user identification 
information. 
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